CVE-2019-3845
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
qpid-dispatch-router
- Vendor
- Red Hat
- Product
- qpid-dispatch-router
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| fixed in Satellite >= 6.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| fixed in Satellite 6.1 - Optional | affected | Unavailable | Unavailable | Unavailable | None listed |
| fixed in Satellite Capsule 6.1 | affected | Unavailable | Unavailable | Unavailable | None listed |